This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa
File:                     326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (raw, json)
Hash identifier:          hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=
Subject key identifier:   0B:4D:0C:B3:44:EB:5C:88:FA:75:73:47:6B:32:D5:6F:27:ED:27:FD
Certificate issuer:       /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Certificate serial:       1A5FBA6356BDA3D62291C791D26C0C9123BFC2C9
Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa
Signing time:             Fri 06 Feb 2026 05:29:34 +0000
ROA not before:           Fri 06 Feb 2026 05:24:34 +0000
ROA not after:            Fri 05 Feb 2027 05:29:34 +0000
asID:                     215685
IP address blocks:        2a0b:4e07:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:ba:63:56:bd:a3:d6:22:91:c7:91:d2:6c:0c:91:23:bf:c2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
        Validity
            Not Before: Feb  6 05:24:34 2026 GMT
            Not After : Feb  5 05:29:34 2027 GMT
        Subject: CN=0B4D0CB344EB5C88FA7573476B32D56F27ED27FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:e5:83:fc:6c:37:c9:62:eb:18:94:81:55:
                    d0:0d:ce:f3:c3:c4:98:0b:23:6d:02:70:0e:19:50:
                    f0:6a:a8:82:0b:bc:79:55:c5:37:4d:67:31:dd:d8:
                    c5:3a:cc:dd:8e:6b:c5:2c:a8:78:3b:fd:64:1f:d5:
                    cb:d9:80:f2:ec:aa:90:84:73:f0:01:59:2b:3a:40:
                    1f:09:06:f2:4d:f3:7e:e6:cb:7d:cc:cc:88:e6:4a:
                    2d:85:7b:12:95:da:26:79:a6:91:5c:cd:64:48:08:
                    0d:83:6d:bc:d4:02:f9:97:b2:3c:d4:1d:b0:8f:9f:
                    72:3f:b4:e6:ec:19:60:50:ed:49:e0:44:36:45:5b:
                    a1:9f:50:75:89:f1:59:08:58:79:f2:fa:69:02:36:
                    af:d3:f9:e4:69:f1:cc:68:3e:b9:cc:f3:64:89:b9:
                    43:d2:46:a0:e6:8b:62:90:40:61:1e:85:c0:c0:2b:
                    83:cc:11:a4:fd:d2:62:92:be:84:9b:de:cb:be:64:
                    09:fb:cb:5b:b9:f2:ae:fa:64:46:bd:e7:90:87:c9:
                    51:6e:91:00:10:19:f8:42:2b:f4:2c:b5:83:73:3f:
                    a3:95:aa:24:0e:30:11:97:ab:8f:39:56:4a:9a:a1:
                    e7:8a:e4:e1:58:b3:95:91:fb:4e:0b:c6:4d:89:70:
                    2f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:0C:B3:44:EB:5C:88:FA:75:73:47:6B:32:D5:6F:27:ED:27:FD
            X509v3 Authority Key Identifier:
                keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:7e:8d:b9:fc:1a:9c:2d:e1:5d:60:2a:b5:fa:00:76:16:
         b0:e3:6f:b9:00:af:77:23:0f:cf:09:3e:12:a5:76:64:a4:a9:
         30:95:32:22:cf:a3:32:a5:e4:6d:ca:20:bb:69:cc:bd:e9:d0:
         d1:b0:06:17:f4:a4:de:9d:31:5e:0e:ba:19:d5:24:76:ae:1d:
         53:aa:14:c4:ab:ad:bd:5c:b4:a4:69:52:4f:a8:81:1c:ee:ac:
         30:22:91:63:80:58:47:f4:71:ec:7a:dc:be:d1:fe:38:3d:40:
         85:fb:b1:9d:b5:13:1f:4d:5a:26:cf:5c:34:37:e3:c0:9c:62:
         51:bb:30:4e:2a:ee:a3:ec:a4:1f:10:8d:5f:d3:88:af:a9:11:
         3f:80:89:c7:f9:c7:2e:6a:17:74:38:ec:33:37:c3:dd:1c:13:
         07:8c:9c:a2:ec:e2:81:86:45:42:75:34:19:59:de:25:4c:a7:
         94:bc:cd:3c:56:96:41:74:45:0f:d0:1a:45:3d:25:15:43:3c:
         61:1d:1b:ae:ad:05:ca:25:6f:b4:e2:e1:c0:a2:31:15:bb:46:
         6d:8c:0f:1e:4f:0b:fa:0e:2d:32:62:d5:47:d7:4d:a6:09:91:
         af:c3:73:63:04:1e:c7:3e:84:8f:b7:36:8c:10:d8:4b:d1:db:
         21:fa:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:57:03 2026 by rpki-client